News for hackers. Stuff that matters.
Re:DNS-over-HTTPS by KaiserPro on Friday September 30, 2016 @05:31AM (#12611398)
the mechanism is there, people are not choosing to use it.

That is because security is hard.

This doesn't mitigate MitM attacks, as upstream DNS records can still be spoofed

WE go from a fast, decentralised, resilient and low overhead system, to a centralised chatty and fragile behemoth.

It still doesn't give end to end encryption, its just a slow encrypted proxy.

Re:DNS-over-HTTPS by viraptor on Friday September 30, 2016 @07:05AM (#12611714)
First people need to know about it to use it. Then it needs to actually work and not fail. https://ianix.com/pub/dnssec-outages.html